From 52c9961d5a0345e437d66b395db964bed0466dc7 Mon Sep 17 00:00:00 2001 From: test Date: Wed, 9 Sep 2026 03:22:09 +0000 Subject: [PATCH] =?UTF-8?q?=E6=AD=A3=E5=9C=A8=E8=8E=B7=E5=8F=96URL...=20ch?= =?UTF-8?q?ainreactors:=200=20=E4=B8=AAURL=20BruceFeIix:=200=20=E4=B8=AAUR?= =?UTF-8?q?L=20Doonsec:=2024=20=E4=B8=AAURL=20=E6=80=BB=E5=85=B1=E5=8E=BB?= =?UTF-8?q?=E9=87=8D=E5=90=8E:=2024=20=E4=B8=AAURL=20=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?=E9=80=9A=E5=91=8A|DELL=20Cloud=20Disaster=20Recovery=E6=93=8D?= =?UTF-8?q?=E4=BD=9C=E7=B3=BB=E7=BB=9F=E5=91=BD=E4=BB=A4=E6=B3=A8=E5=85=A5?= =?UTF-8?q?=E6=BC=8F=E6=B4=9E(CVE-2026-71171)=E3=80=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- data.json | 3 +- ...统命令注入漏洞(CVE-2026-71171).md | 34 +++++++++++++++++++ 2 files changed, 36 insertions(+), 1 deletion(-) create mode 100644 doc/2026-09/漏洞通告DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171).md diff --git a/data.json b/data.json index ce93e322..52ffdc05 100644 --- a/data.json +++ b/data.json @@ -26690,5 +26690,6 @@ "https://mp.weixin.qq.com/s/ftHuHkq-DChpCzpPuW0ywg": "AiPy 再获 OpenVPN 官方致谢：发现并协助修复多个安全漏洞", "https://mp.weixin.qq.com/s/9eDO8xuhyTrEENhtxc-d2Q": "天锐绿盘文档安全管理平台userExitList存在信息泄露漏洞", "https://mp.weixin.qq.com/s/udxrRBzhCWnudDZW4FCO9g": "第九期漏洞挖掘培训，1元先试水，3档任你选，带你从0挖到高危", - "https://mp.weixin.qq.com/s/g_HDhBcEJt9zWRayt1DW0g": "行业资讯｜ Chrome等高危漏洞被积极利用 &网络安全项目中标情况汇总（9月8日）" + "https://mp.weixin.qq.com/s/g_HDhBcEJt9zWRayt1DW0g": "行业资讯｜ Chrome等高危漏洞被积极利用 &网络安全项目中标情况汇总（9月8日）", + "https://mp.weixin.qq.com/s/oEuv8YWvwNmf2JozL5SiXw": "漏洞通告|DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171)" } \ No newline at end of file diff --git a/doc/2026-09/漏洞通告DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171).md b/doc/2026-09/漏洞通告DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171).md new file mode 100644 index 00000000..4d28be86 --- /dev/null +++ b/doc/2026-09/漏洞通告DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171).md @@ -0,0 +1,34 @@ +# 漏洞通告|DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171) + 晟晖科技 2026-09-09 00:30 + +![](https://mmbiz.qpic.cn/mmbiz_png/oMpOLlQ76IHAo5KTgaH9T3ViaAB3y1FzTgkwUUV4amhJXHXicKqTxZUjQibjS4ERXlpzFTwBy6Ff5dfyzlbE2gGYA/640?wx_fmt=png&from=appmsg "") + +**漏洞描述** + + +DELL Cloud Disaster Recovery是戴尔科技推出的一项云容灾解决方案‌。 + + +DELL Cloud Disaster Recovery存在操作系统命令注入漏洞，该漏洞源于REST API对OS命令中特殊元素中和不当，攻击者可利用该漏洞远程访问并实现远程执行。 + +**影响产品** + + +DELL Cloud Disaster Recovery <=20.2 + + +**处置建议** + + +目前厂商已发布升级程序修复该安全问题，详情见厂商官网: + +https://www.dell.com/support/kbdoc/en-us/000500898/dsa-2026-353-security-update-for-cloud-disaster-recovery-vulnerabilities + +![](https://mmbiz.qpic.cn/mmbiz_png/JaFvPvvA2J1l9248vhzo8jicBPJaBT4ZZvqlXPF8rockoI0fkvClGaibs9yhsutSd0djZfstFIZaKKnHHbGEhVwg/640?wx_fmt=png "") + +![](https://mmbiz.qpic.cn/mmbiz_jpg/wFG4yuGVVyJP3URScZXjAUMF0UIibYy1VkvWqs6A5LngKBhPt4KHA2kHuuPWCTQkhb7HJjlAjTDu0d8JF10yhvhicGkO9wDIOnzRqvmYPJYMk/640?wx_fmt=jpeg&from=appmsg "undefined") + +**全时全域  安全无忧** + +来源：CNVD +